Microsoft 70-680 Online Practice Questions and Exam Preparation

Microsoft 70-680 Online Questions & Answers

• Question 141:

  Your company has Windows 7 Enterprise computers that do not have a Trusted Platform Module (TPM) installed. You need to enable BitLocker drive encryption on the operating system drives.

  Which two actions should you perform? (Each correct answer presents part of the solution. Choose two.)

  A. Create a USB startup key.
  B. Configure the Require additional authentication at startup group policy setting.
  C. Create a network key location.
  D. Configure the Allow enhanced PINs for startup group policy setting.
  A. Create a USB startup key.
  D. Configure the Allow enhanced PINs for startup group policy setting.

  ---

  Ref: http://technet.microsoft.com/en-us/library/ee424319(v=WS.10).aspx

• Question 142:

  You have a computer named Computer1 that runs Windows 7.

  You need to ensure that Computer1 can connect to File Transfer Protocol (FTP) servers only while it is connected to a private network.

  What should you do?

  A. From Windows Firewall with Advanced Security, create a new rule.
  B. From the local Group Policy, modify the application control policies.
  C. From Windows Firewall, modify the Allowed Programs and Features list.
  D. From Network and Sharing Center, modify the Advanced Sharing settings.
  A. From Windows Firewall with Advanced Security, create a new rule.

  ---

  Creating WFAS Rules The process for configuring inbound rules and outbound rules is essentially the same: In the WFAS console, select the node that represents the type of rule that you want to create and then click New Rule. This opens the New Inbound (or Outbound) Rule Wizard. The first page, shown in Figure 7-7, allows you to specify the type of rule that you are going to create. You can select between a program, port, predefined, or custom rule. The program and predefined rules are similar to what you can create using Windows Firewall. A custom rule allows you to configure a rule based on criteria not covered by any of the other options. You would create a custom rule if you wanted a rule that applied to a particular service rather than a program or port. You can also use a custom rule if you want to create a rule that involves both a specific program and a set of ports. For example, if you wanted to allow communication to a specific program on a certain port but not other ports, you would create a custom rule.

• Question 143:

  You have recently installed Windows 7 Ultimate on a laptop computer, installed applications such as Office, and downloaded and installed all outstanding updates.

  The computer has two internal hard disks, both formatted with the NTFS file system. You also have an external USB hard disk that you have plugged into the laptop. You used the convert fs/ntfs command to convert the external hard drive to

  the NTFS file system. You have an 8-GB USB flash memory device and the laptop contains a DVD-ROM writer. In your workplace, you can plug in to the corporate network and connect to a network share on a file server running Windows

  Server 2008 R2.

  On what devices can you create a full System Image backup of the laptop's system volume? (Choose all that apply.)

  A. The second internal hard disk
  B. The external hard disk
  C. The USB flash drive
  D. Multiple DVD-ROMs
  E. The network share
  A. The second internal hard disk
  B. The external hard disk
  E. The network share

• Question 144:

  You administer client computers that have Windows 7 Enterprise installed. A server named Server1 has an IP address of 10.10.4.56. The server accepts Remote Desktop connections at a custom port 10876.

  You need to connect to the server from a client computer by using Remote Desktop.

  What should you do?

  A. From an elevated command prompt, run mstsc.exe 10.10.4.56 port: 10876.
  B. From the Advanced tab of your Remote Desktop connection, configure the port of Server1 in the Connect from anywhere option.
  C. From the General tab of your Remote Desktop connection, type 10.10.4.56:10876 in the Computer field.
  D. From the Advanced tab of your Remote Desktop connection, configure the IP address and port of Server1 as the RD Gateway Server.
  C. From the General tab of your Remote Desktop connection, type 10.10.4.56:10876 in the Computer field.

  ---

  

  Note:

  * mstsc.exe allows you to initiate terminal services commands via the command line, and forms an important part of this additional Windows service.

  Incorrect:

  Not A: Incorrect syntax.

• Question 145:

  Your network consists of one Active Directory domain. You have two computers named Computer1 and Computer2 that run Windows 7. Both computers are members of the domain.

  From Computer1, you can recover all Encrypting File System (EFS) encrypted files for users in the domain.

  You need to ensure that you can recover all EFS encrypted files from Computer2.

  What should you do?

  A. On Computer1, back up %systemroot%\DigitalLocker. On Computer2, restore %systemroot %\DigitalLocker.
  B. On Computer1, export the data recovery agent certificate. On Computer2, import the data recovery agent certificate.
  C. On Computer1, run Secedit.exe and specify the /export parameter. On Computer2, run Secedit.exe and specify the /import parameter.
  D. On Computer1, run Cipher.exe and specify the /removeuser parameter. On Computer2, run Cipher.exe and specify the /adduser parameter.
  B. On Computer1, export the data recovery agent certificate. On Computer2, import the data recovery agent certificate.

  ---

  You can import the recovery agent to another computer running Windows 7 if you want to recover files encrypted on the first computer. You can also recover files on another computer running Windows 7 if you have exported the EFS keys

  from the original computer and imported them on the new computer. You can use the Certificates console to import and export EFS keys.

  NOT Secedit.exe:

  You can use both the Local Group Policy Editor and the Local Security Policy console to import and export security-related Group Policy settings. You can use this import and export functionality to apply the same security settings to standalone computers that are not part of a domain environment. Exported security files are written in Security Template .inf format. As well as using Local Group Policy Editor and the Local Security Policy console to import policies that are stored

  in .inf format, you can apply them using the Secedit.exe command-line utility.

  NOT Cipher.exe /removeuser /adduser.

  NOT DigitalLocker.

• Question 146:

  You administer portable computers in your company network. All the computers have Windows 7 Enterprise installed. You need to configure Windows Firewall on computers used by engineer employees to meet the following requirements:

  1. Engineer employees must receive remote support from desktop support employees while they are at the corporate main office.

  2. Engineer employees' remote support is prevented when they are working from home.

  What should you do? (To answer, configure the appropriate option or options in the dialog box in the answer area.)

  Hot Area:

  

  

  ---

  Ref: http://technet.microsoft.com/en-us/library/bb457004.aspx

• Question 147:

  You have a computer running Windows 7. You create a VHD and install Windows 7 in it.

  You reboot your system and notice that the boot menu now shows two installations of Windows 7.

  How do you fix it?

  A. Use Sysprep with an answer file to disable one installation.
  B. Run the BCDEdit command.
  C. Run the Start/w ocsetup command.
  D. Run the Dism command
  E. Add a boot image and create a capture image in WDS.
  F. Run the PEImg /Prepcommand.
  G. Run the ImageX command with the /Mount parameter.
  H. Run the Dism command with the /Mount-Wim option.
  I. Run the Dism command with the /Add-Package option.
  J. Run the DiskPart command and the Attach command option.
  B. Run the BCDEdit command.

  ---

  BCDEdit Command-Line Options

  Boot Configuration Data (BCD) files provide a store that is used to describe boot applications and boot application settings. The objects and elements in the store effectively replace Boot.ini. BCDEdit is a command-line tool for managing BCD

  stores. It can be used for a variety of purposes, including creating new stores, modifying existing stores, adding boot menu options, and so on. BCDEdit serves essentially the same purpose as Bootcfg.exe on earlier versions of Windows, but

  with two major improvements:

  BCDEdit exposes a wider range of boot options than Bootcfg.exe.

  BCDEdit has improved scripting support.

  Note

  Administrative privileges are required to use BCDEdit to modify BCD. BCDEdit is the primary tool for editing the boot configuration of Windows Vista and later sions of Windows. It is included with the Windows Vista distribution in the %

  WINDIR %\System32 folder.

  BCDEdit is limited to the standard data types and is designed primarily to perform single common changes to BCD. For more complex operations or nonstandard data types, consider using the BCD Windows Management Instrumentation

  (WMI) application programming interface (API) to create more powerful and flexible custom tools.

• Question 148:

  You use a portable computer that has Windows 7 SP1 Ultimate installed.

  You update the driver for the computer's video card and the computer becomes unresponsive.

  You need to be able to roll back the video card driver.

  What should you do?

  A. Restart the computer in safe mode.
  B. Start the computer, press F8, and then select Repair Your Computer.
  C. Boot the computer from a Windows Recovery Environment (Windows RE) disk, and then restore the system image.
  D. Start the computer, press F8, and then select Debugging Mode.
  A. Restart the computer in safe mode.

• Question 149:

  You have two computers named Computer1 and Computer2 that run Windows 7.

  You need to ensure that you can remotely execute commands on Computer2 from Computer1.

  What should you do?

  A. Run Winrm quickconfig on Computer1
  B. Run Winrm quickconfig on Computer2
  C. Enable Windows Remote Management (WinRM) through Windows Firewall on Computer1
  D. Enable Windows Remote Management (WinRM) through Windows Firewall on Computer2
  B. Run Winrm quickconfig on Computer2

  ---

  Windows Remote Management Service The Windows Remote Management service allows you to execute commands on a remote computer, either from the command prompt using WinRS or from Windows PowerShell. Before you can use WinRS or Windows PowerShell for remote management tasks, it is necessary to configure the target computer using the WinRM command. To configure the target computer, you must run the command WinRM quickconfig from an elevated command prompt. Executing WinRM quickconfig does the following:

  -Starts the WinRM service

  -

  Configures the WinRM service startup type to delayed automatic start

  -

  Configures the LocalAccountTokenFilterPolicy to grant administrative rights remotely to local users

  -

  Configures the WinRM listener on http://* to accept WS-Man requests

  -Configures the WinRM firewall exception

• Question 150:

  To establish a DirectAccess connection to the network, what is the first requirement?

  A. Install a certificate
  B. Create a VPN connection
  C. A static IPv4 address
  D. A static IPv6 address
  D. A static IPv6 address